meth

Binance's Chief Security Officer Jimmy Su stated in a July interview that fake job interviews could lure employees into running malicious code on company devices, leading to device control, credential theft, and infiltration of internal networks.In September, a Binance software engineer downloaded a malicious programming assignment to their work computer during a fake interview; Binance's preliminary investigation indicated that this incident was part of a multi-stage attack in the October theft case. Jimmy Su also pointed out that attackers might exploit seemingly normal technical assessment steps to bypass antivirus tools. Binance's subsequent investigation revealed that the installer for the malicious assignment evaded endpoint security tools through obfuscation and other evasion techniques.Binance stated that it has intercepted 57 suspected cyber threats related to North Korea so far this year, approximately one every five days. After the October attack, Binance announced that it has strengthened device and access controls, rebuilt affected wallet systems and internal AI tools, and increased investments in endpoint protection and development environment security.

The preliminary investigation report on the security incident released by Binance on October 29 shows that the attack began with a fake recruitment. According to the report, in September, a Binance software engineer was contacted by someone impersonating a project director through a legitimate job platform. After undergoing a fake HR video interview and a fake CEO second interview, the engineer was asked to download a homework code repository on their work computer, which contained a zero-day Trojan that bypassed endpoint protection. The attackers then used the compromised device and an internal AI tool to control the computers of two other wallet engineers, stealing deployment credentials, and ultimately executed a malicious script on October 29 to transfer approximately $6.3 billion. Binance stated that it has frozen or intercepted about $2.85 billion and has compensated 98% of the affected assets.This method is almost identical to the March 2022 theft of the Axie Infinity sidechain Ronin cross-chain bridge. At that time, the North Korean hacker group Lazarus contacted a senior engineer at developer Sky Mavis through LinkedIn for a high-paying position. After several rounds of interviews, they sent an offer file containing a Trojan, which allowed them to control the private keys of the validation nodes, stealing approximately $625 million. The Binance report also noted that this year, 57 suspected cyberattacks related to North Korea have been detected and intercepted, with methods including fake interviews, malware disguised as popular development tools, tampered software packages, and browser plugins, among others.

The marketing head of mETH Protocol, Jowella Lim (X account speicherx), announced that she has rejoined the Ethereum Layer 2 network Mantle, responsible for product marketing. She stated that Mantle has the opportunity to bring global stock exposure on-chain, and the product mStocks is in progress. The official Mantle account responded by welcoming her back.Jowella Lim mentioned that she has made a clear choice regarding her career direction. She noted that this year, areas such as tokenization, perpetual contracts, prediction markets, payments, and stablecoins are developing rapidly, making the team's direction more attractive to her. Her goal is to enhance the visibility of products and assets currently on Mantle and collaborate with ecosystem partners Bybit and Byreal. She also expressed confidence that Mantle will continue to grow among projects built for on-chain adoption.According to her personal website, Jowella Lim has been engaged in marketing at Mantle since April 2024 and has served as the marketing head of the mETH Protocol, incubated by Mantle, since January 2025, being the first marketing employee. The website states that the protocol's peak locked value is $2.19 billion. On the same day, a discussion on the MIP-36 draft appeared in the Mantle forum, proposing to confirm Halo Prime Limited as a strategic partner and issuer of mStocks, describing mStocks as tokenized certificates based on Mantle and linked to listed stocks, with the discussion not involving treasury funds. According to RootData, Mantle originated from BitDAO, completing $230 million in financing in June 2021 and $356 million through an IDO in August of the same year.

Consensys published on platform X that its cryptographer Youssef El Housni, along with collaborators from Wuhan University of Technology, KU Leuven, and the National Academy of Sciences of Belarus, proposed a new subgroup member detection method called Divide-and-Pair.Not all points on non-prime order curves like Curve25519 belong to the target subgroup; skipping this check may lead to small subgroup attacks. The NIST P series curves are of prime order and do not require this check. This method treats two known schemes as the two ends of the same parameter range, selecting optimal settings for each curve, with speeds not lower than the original methods. According to Consensys, the speedup factors for each curve are: approximately 1.6 times for Curve25519, approximately 1.3 times for Curve448, approximately 1.4 times for GC256A, approximately 10.8 times for FourQ, and approximately 7 times for Jubjub.This method has been integrated into the open-source library gnark-crypto. This library currently runs on Besu, Linea, go-ethereum, as well as systems based on gnark such as Succinct and Lighter. The related paper has been accepted by IACR Transactions on Cryptographic Hardware and Embedded Systems (TCHES) and will be published at CHES 2027.

The Hang Seng Index Company announced that the Hang Seng Hong Kong American Technology Index will add Anthropic, PBC (stock code: ANT.O) to the list of designated U.S. listed constituent stocks, provided that Anthropic confirms its listing. The weight of the 9 U.S. listed constituent stocks will be recalculated to equal weight after the close of trading on the 7th trading day following Anthropic's listing, with the new constituents and new weights taking effect on the 11th trading day.The index will also update the stock selection criteria, constituent stock selection methods, rapid inclusion mechanisms, and replacement rules for temporarily removing constituent stocks, and will introduce new liquidity requirements. The new methods will be adopted starting from the index review ending on September 30, 2026, with the relevant constituent stock changes taking effect on December 14, and the index name and code will remain unchanged.

According to The Washington Post, U.S. President Trump will announce the easing of regulations related to methane leaks from oil companies.

Binance founder Zhao Changpeng released a simplified guide for cryptocurrency asset custody, suggesting that users match security measures according to their holding scale and technical capabilities, while focusing on three major issues: preventing asset theft, avoiding accidental loss, and planning for asset inheritance in advance.Regarding self-custody, Zhao Changpeng advised users to take measures such as storing private keys on offline devices, using reliable hardware wallets, verifying transaction addresses, and setting up multiple off-site backups. He also reminded users to avoid saving keys through photos or screenshots to prevent them from syncing to the cloud and causing leaks. In terms of asset inheritance, users should develop a secure recovery plan in advance, avoiding direct sharing of keys or storing recovery information in an unencrypted form. For centralized trading platforms, Zhao Changpeng suggested that users assess the platform's reputation, security capabilities, and business model, and strengthen account protection through measures such as independent email, strong passwords, two-factor authentication, hardware security keys, and withdrawal address whitelists, while also being vigilant against phishing attacks and API credential leaks.Zhao Changpeng further suggested that users should reasonably allocate assets between centralized trading platforms and personal wallets based on their technical capabilities, security management levels, and funding needs. Self-custody means that users need to independently bear the responsibility for private key protection and asset recovery, while custody by trading platforms involves platform credit and counterparty risk. Additionally, maintaining an independent wallet helps to ensure access to assets during maintenance or service interruptions on trading platforms.

Ostium has released a design update on the second phase of the compensation plan for liquidity providers (OLP). This plan offers two compensation mechanisms for users who have losses exceeding 1,000 USDC and have not opted for Convenience Allocation:Default Plan A (USDC Installment Payment): Funding sources include recovered and future recovered funds (distributed proportionally after deducting the first phase portion), a specific share of revenue from the Ostium protocol and Gateway (initially 50% of Ostium opening fees), and potential partner incentives or revenue sharing.Optional Plan B (Ostium Labs Equity Conversion): Users who meet securities regulation requirements can convert part of their unrecovered losses into Ostium Labs equity at the valuation of the next round of financing, with the same class of shares as the team, and a total holding percentage for participating users subject to a fully diluted cap.The second phase portal is scheduled to launch on October 30, and eligible users can proportionally claim the allocated funds from Plan A; if they choose equity conversion, the portion of losses converted to equity will no longer be eligible for subsequent installment payments under Plan A, thereby helping to accelerate the repayment process for the remaining unconverted funds.Ostium emphasizes that this compensation plan is voluntarily initiated by the official and does not guarantee the full recovery of lost funds; specific implementation details and parameter scales are still being refined.

ChainCatcher live report, at the Token2049 conference in Singapore, World Liberty Financial co-founder Eric Trump stated that the era of paying salaries with stablecoins has arrived. He revealed that his family business, as a "super employer," has tens of thousands of employees in global hotel assets and is "undoubtedly researching" salary payments in stablecoins. He pointed out that it has become common for athletes to request payment in Bitcoin for contracts, and the appreciation of underlying assets often far exceeds the contract amount; for ordinary employees, check clearing takes 24-36 hours, while people want money "immediately in their accounts."

A survey by the Democratic Party of the U.S. Senate claims that the stablecoin USDT issued by Tether has become a major payment method for Iran. The survey shows that among over 800 sanctioned cryptocurrency wallets, about 84% primarily or exclusively use USDT.The U.S. Senate Permanent Subcommittee on Investigations had previously stated that its review of blockchain records, sanctions lists, and asset seizure notices found that the sanctioned wallets are mainly distributed across the Tron and Ethereum networks and have conducted USDT transactions.

Meta's personal AI assistant Muse has been accused of reading users' private iMessages without permission and providing false explanations about how it accesses this information. Technology columnist Jason Aten installed the assistant on his iPhone and Mac when Muse launched on September 8 and explicitly refused to grant it access to personal data such as information and calendars.A few days later, Muse sent Aten a notification suggesting he write a column about the new iPhone that he had just discussed with his podcast partner, also mentioning a deadline reminder from the editor. Aten asked Muse how it knew this, and it replied that the Mac application only forwards notification previews and does not involve the content of messages. In reality, Muse had synchronized over 187,000 records from the local private information database on the Mac, an operation that requires full disk access permissions on macOS.David Singleton, head of Meta's superintelligent lab, responded on Threads that this feature requires users to actively choose to opt-in. Aten denied ever turning on that switch and stated that Meta had not answered related questions. Amazon has banned Muse from shopping on its site, stating that the assistant did not indicate its AI identity while browsing and seemed capable of capturing and storing user credentials. Since its launch, Muse has been downloaded over 2.5 million times, with its promotion emphasizing user control over access.

The founder of Slow Fog, Yu Xian, disclosed that following the previous FomoPeek App poisoning and theft incident, a food delivery app named ComeCome (comecome.icu) has been found to implement attacks using similar methods. FomoPeek versions v1.1-1.2 contain a malicious SDK that integrates 8 types of iOS kernel exploit schemes, which can automatically select attack methods based on device model and system version. The known affected iOS versions cover iOS 12--18.7 and 26--26.1.After a successful attack, it can break through the iOS sandbox mechanism, thereby stealing assets from cryptocurrency wallets. Yu Xian warned that such threats may also affect iPad and Mac devices, and advised users to immediately update to the latest iOS version and remain highly vigilant against apps from unknown sources.

Gate, the global cryptocurrency exchange, has launched the Gate Card, a Visa prepaid card product, in collaboration with Bridge and Stripe, significantly reducing the implementation period to about 6 months, compared to the over one year estimated by traditional banking partners.The Gate Card is issued by Lead Bank and allows users to top up with stablecoins and spend on the global Visa network. The card can be added to Apple Pay and Google Wallet. Previously, Gate had launched card products in overseas markets, but faced complexities related to compliance and multi-party coordination in the U.S. market.Gate US COO Laura Lui stated, "Bridge serves as a critical coordinating layer among different participants, allowing Gate US to focus on customers, product experience, and overall business strategy." Gate US views the Gate Card as an early step in a broader stablecoin payment strategy, with potential plans to issue its own stablecoin in the U.S. through Bridge's stablecoin platform in the future.

According to Bitcoin.com, the Australian Securities and Investments Commission (ASIC) disclosed that in the fiscal year 2026, over 19,400 online scams were removed (a year-on-year increase of 182%), among which cryptocurrency investment scam platforms reached 3,106, an increase of about 30% compared to the previous fiscal year.ASIC pointed out that scam groups are heavily leveraging generative AI technology to build a systematic fraud ecosystem: by using deepfake videos of well-known figures such as Australian Prime Minister Albanese and financial commentators to promote fake cryptocurrency trading robots, while simultaneously creating counterfeit media websites, AI-generated comments, and fake profit dashboards to lure victims into continuously increasing their investments, with funds ultimately flowing to overseas criminal groups. Just from the impersonation of high-profile individuals alone, the related losses have exceeded 7.4 million Australian dollars.

The B.AI platform officially launched the "Recharge for Others" feature on August 12, allowing users to top up platform points for team members or friends with one click. Users can input the recipient's email or on-chain address (compatible with TRON, EVM, and Solana networks) for precise targeting and real-time crediting.In terms of payment channels, this feature has fully integrated with fiat channels such as WeChat, Alipay, UnionPay, Visa, Mastercard, Google Pay, and Apple Pay, while also supporting mainstream cryptocurrency payments. To encourage user adoption, the platform has simultaneously launched a recharge reward campaign: recharging via BNB Chain allows users to receive a 1:1 equivalent point bonus, while other payment methods offer a 1:0.5 reward. Each user can receive up to $100 in additional rewards.

Bitcoin News posted on the X platform that Bitcoin developers have launched a new visualization tool to explain how entropy works and how to generate randomness for Bitcoin private keys.The tool covers true random number generators (TRNG), pseudo-random number generators (PRNG), rolling dice, and flipping coins.

According to The Block, Trezor's Chief Business Officer Danny Sanders refuted recent criticisms of cryptocurrency hardware wallets made by blockchain investigator ZachXBT.Earlier this week, ZachXBT posted on Telegram, "All hardware wallets are complete garbage and I do not recommend using them for important tasks such as signing transactions or storing funds," and suggested that users use a dedicated iPhone to store funds and sign transactions.In response, Sanders acknowledged in an interview that firmware/software updates for hardware wallets can sometimes interfere with urgent or large transactions, and that the user experience can indeed be "clunky," understanding the users' frustration. However, he opposed ZachXBT's blanket statement: while hardware wallets may not be the best single solution for advanced users managing large amounts of funds, they are not garbage.He pointed out that compared to hardware wallets, the operating system and connectivity features of an iPhone present more "attack risks." For the average cryptocurrency user, hardware wallets remain the best self-custody option available.

According to the South China Morning Post, Sun Shengbin from the Wenzhou Public Security Bureau and Lou Yandi from the Zhejiang Provincial Public Security Department's Criminal Investigation Team published a technical paper on June 4 in the journal "Forensic Technology," systematically disclosing the Chinese police's forensic tools and case handling processes for virtual currency assets such as Bitcoin and Ethereum. The content covers aspects such as device cracking, evidence collection, on-chain transaction tracking, and asset freezing and seizure.The paper outlines several tracking methods, one of which involves tracking transaction fees back to exchanges like Binance, allowing the police to obtain user data. The police can acquire "Know Your Customer" (KYC) records from major exchanges such as Binance, OKX, and HTX through formal legal channels. For funds stored in exchanges, the police can freeze accounts for six months, and the freezing period can be extended.Additionally, the document emphasizes strict operational bottom lines: investigators must not privately hold private keys. The principle of "separation of case handling and custody" must be adhered to, with comprehensive supervision and the establishment of a clear regulatory chain record.